Privacy policy

This page applies to tamvinh.com. If you leave your email or name here, this explains exactly what happens to it, with nothing hidden behind difficult language.

Who is responsible for your data

This website is run by Tam Vinh Nguyen, known as Tam Vinh. If you have any question about your personal data, use the Contact page on this website.

What I collect, and why

• When you submit the contact form: your name, email, the inquiry type you selected, and your message. Used only to reply to you, never for newsletters unless you subscribe separately.
• When you subscribe: your email and chosen language. A confirmation email comes first, and the subscription only becomes active when you click the link inside, so nobody can sign you up without your knowledge.
• When you claim a free gift: your email, language, the tasks you confirmed completing, and your IP address at that moment. The IP is used only to limit repeat claims, nothing else, and is deleted after 90 days.
• When you place an order: your email, the product, amount, order code and payment status. I never store your bank account number or any card details.
• When you sign in: the email address you enter, your language, and your IP address at the moment you request the sign-in link. The link works once and expires after 15 minutes. No password is stored because this website does not use passwords.
• Once signed in: a session is stored so you are recognised on your next visit. You can remove it at any time by pressing Sign out.
• When you click a share link of the form tamvinh.com/r/: which page referred you and your browser language, only to see which sharing channel works. No IP address is recorded at this step.

Legal basis

For newsletter and gift claims, the basis is the consent you actively give, which you can withdraw at any time. For orders, the basis is performance of the sale contract. For abuse prevention, the basis is the legitimate interest in keeping the system usable for everyone.

Who else can access your data

Your data is never sold or shared for third-party advertising. Some technical providers process data on my behalf so the system works: Google Firebase for storage, Resend for sending email, Cloudflare for storing gift files and generating time-limited download links, and SePay for payment reconciliation. They may only use the data to deliver their technical service. Some processing happens on servers outside Vietnam because of the nature of these services.

How long I keep it

• Contact messages: up to 24 months from submission.
• Newsletter subscriptions: until you unsubscribe. Unconfirmed records are deleted after 30 days.
• Gift claim logs: the IP address is deleted after 90 days, the email is kept longer to support you regarding the gift you received.
• Share link click logs: up to 12 months.
• Sign-in links: 15 minutes, and destroyed as soon as you use one.
• Sign-in sessions: 30 days, or until you press Sign out.
• Orders: for the period required by Vietnamese accounting record retention rules. To be clear about one thing: if you ask me to delete your account, I delete your sign-in records, but paid orders must stay, because they are accounting records and the email address on the order is part of that record.

Your rights

You have the right to know what data is held about you, to request access, correction, deletion, and to withdraw consent at any time. To exercise any of these, write to lienhe@tamvinh.com or send a message through the Contact page, and I will respond within a reasonable time. Every newsletter email includes an unsubscribe link at the bottom that removes you from the list immediately, with no login or extra confirmation.

Cookies

This website uses exactly one cookie, to remember whether you are viewing the Vietnamese or English version. It is not used for advertising, does not track behavior, and is never shared with third parties. The site currently uses no Google Analytics or any other measurement tool. Embedded YouTube videos load only a thumbnail until you press play, so nothing is sent to YouTube before you choose to watch.

Security, children, and changes

Data is stored on a system that blocks all direct access from browsers, reachable only by the website's own server. No system is perfectly secure; if an incident affects your data, I will notify you as required by law. This website is not directed at anyone under 13. This policy may be updated as the site changes, and the update date is always shown at the top.